Web Directory

» Anti-Phishing: Best Practices for Institutions and Consumers
   White paper with detailed advice on controls against phishing.
   http://www.mcafee.com/us/_tier2/products/_media/mcafee/wp_antiphishing.pdf

» BBB Online - Phishing
   Better Business Bureau's advice on how to avoid and report phishing attacks.
   http://www.bbbonline.org/idtheft/phishing_cond.asp

» Bank Safe Online
   Advice from a UK banking industry group about phishing, money mules and Trojans.
   http://www.banksafeonline.org.uk/

» CallingID
   Free anti-phishing browser toolbar and embedded link checking software alerts the user if it detects phishing and related risks. Commercial products offer mutual authentication of websites and users.
   http://www.callingid.com

» Comodo Inc.
   Provider of X.509 digital certificates to authenticate genuine website contents, giving consumers greater confidence that they are not interacting with fake websites run by phishers.
   http://www.contentverification.com

» GeoTrust Inc.
   TrustWatch provides free anti-phishing toolbar and browser extensions that identify dubious sites in Google search results.
   http://www.trustwatch.com/

» GralicWrap
   Free anti-phishing software for Internet Explorer uses fraudulent site reports submitted by users to build a global blacklist.
   http://www.gralicwrap.com

» Green Armor Solutions
   Sells Identity Cues software to help users recognize fake websites through visual reminders linked to user login details.
   http://www.greenarmor.com/

» McAfee
   Site Advisor anti-phishing toolbar plus free limited-functionality version.
   http://www.siteadvisor.com/

» Millersmiles.co.uk
   Information about phishing scams.
   http://www.millersmiles.co.uk/

» Namkara
   Generates domain names that could be used in a homograph phishing attack, or indeed for typosquatting etc.
   http://www.namkara.com/homograph

» Netcraft
   Browser toolbar to report and block phishing sites identified by the toolbar user community. Identifies in which countries websites are hosted as further clues to their authenticity.
   http://toolbar.netcraft.com/

» OnGuard Online
   Phishing section of an informational website run by the US Federal Trade Commission. Advises consumers on how to spot, avoid and report phishing attacks. Free phishing awareness videos.
   http://onguardonline.gov/phishing.html

» Payments News
   Phishing-related news from the financial services industry.
   http://www.paymentsnews.com/phishing/

» PhishTank
   Clearing house for information on phishing sites reported by the public plus an open API to integrate the data into anti-phishing applications.
   http://www.phishtank.com/

» Scamdex
   Archive of tens of thousands of scam emails in five categories, with advice on avoidance and reporting.
   http://www.scamdex.com

» Spoof Email Tutorial
   Explains how scammers trick people into thinking they're being contacted by eBay.
   http://pages.ebay.com/education/spooftutorial/

» The Phishing Guide
   White paper explains how phishing works and outlines control measures that can be taken by individuals and institutions to minimize the risks.
   http://www.ngssoftware.com/papers/NISR-WP-Phishing.pdf

» US-CERT Cyber Security Tip on Preventing and Responding to Identity Theft
   Straightforward advice for those who fall prey to phishing and similar attacks.
   http://www.us-cert.gov/cas/tips/ST05-019.html

» Why Phishing Works
   Research paper from Harvard evaluated the deceptiveness of typical phishing emails.
   http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf

» Wikipedia: Phishing
   Explains common phishing methods and dangers. Lots of references.
   http://en.wikipedia.org/wiki/Phishing